With a company-managed list of owned domains where real employees have their work email addresses (unrelated to website domains).
And using DNS to prove that a domain is actually owned by this organization
And using DNS to prove that a domain is actually owned by this organization