Register your team through the WSO2 identity workflow, bind it to your organization domain, and request the least privilege role you need from day one.
Your email domain is used to route approval and organization policy.
Use at least 8 characters. Final password policy is enforced by the WSO2 registration backend.