Using a custom domain URL against Entra ID, do I need to worry about the OIDC enterprise application's redirect URIs, like I would if i were using SAML? Or does Citrix Cloud manage that for us?

I don’t think it adds the custom logout url in entra so you probably want to check that.