Azure Active Directory Registered Application best practices

We were planning on adding an application to the azure marketplace and integrating using OIDC.

There were two aspects which I wanted to validate with the general community on best practices..

a) Is it a best practice to honor users only from "federated Domains"?

b) What is the best practice on allowing "Guest Users" to federate from a given tenant?