Limit K12 Student Devices to Just Managed Apple IDs

We're launching Apple Classroom next year, and I'd like to hear from other K12 institutions as to how they might be setting restrictions to prevent students from using a personal Apple ID on a school-issued device. We want all student devices to only be using our @appleid.domain.com Managed Apple IDs so we can make best use of Apple Classroom.

Are there profiles or settings that K12 orgs can push to limit the Apple IDs by domain? ... by managed vs. personal?

Environment is all MacBook Air M1 for students and staff. Filewave = MDM.