Configuring cloud directory lookup priority
For Windows systems that are joined to Active Directory and have the Centrify Client installed, you can make sure that the service looks for UPNs in the cloud directory only by specifying a comma-separated list of domain suffixes in the field entitled as follows: Use the cloud directory to look for users based on UPNs that match the following domain suffixes (Windows only). This setting is available in Settings > Resources > Security > Security Settings.
If this list is empty or a UPN suffix doesn't match any suffixes in this list, the service looks for the UPN in Active Directory first; if the user isn't in Acitve Directory, the service then looks for the UPN in the cloud directory.
For example, if the affected uses are firstname.lastname@example.org and email@example.com, then you would enter "acme.com, foo.com" in this field.