We've got a Tensor license and gone through all the hoops to prove we own our domain and setup single sign on. And yet, we still have tons of problems with old/rogue accounts out there, setup under the domain that we've proven is ours and not being able to disassociate them from other company profiles and join them to ours.
If we prove we own a domain, it should be a simple click for our admins to "takeover" or force an association of any account out there using domain, to our company profile.
Support is useless and tells us to just assign a new email address. 🙄