About policy enforcement
Centrify PAS clients can enforce a variety of policies, such as required multi-factor authentication mechanisms for users to log in. In addition to MFA, clients can enforce conditional access policies and system policy rules. For example, clients can initiate password reconciliation operations on behalf of the shared account password management capability in Centrify PAS.
For details, see How to create a policy set and assign it to users.