With your own registration page, with a customizable URL, you can have users register themselves. You can also require invitation, and require an admin to approve new users before they can log in.
Registration can be locked to specific email domains, or make use of your own SSO (single sign-on) solution.