Recently we've started to use Atlassian's Access offering to insure our users follow corporate security policy (using 2FA / password strength / etc). However, I can't verify that *ONLY* users from our domain have access to our repository without manually cross-checking the Access account list with the Bitbucket account list.
Major pain point to determine if we have any gaps in our security policy.
Seems that this should be easy; either the admin should be able to specify 'only allow users from the follow domains', or specify security requirements similar to Access.