Hello
Policies are processed top down, so this should be kept in mind when applying the policies.
Now, MFA challenges will only be shown when the corresponding attribute is valid and present for the User that is attempting to use this.
For instance, You will want to confirm that the User has a Mobile Phone number in ADUC or in the Cloud User section (If Cloud User), User should have enrolled a device for Mobile Auithenticator, etc.
Lsst, to confirm the correct policy is being enforced, check the User in the User table, and look at the Policy Summary. You should see the applied polices and authentication profile in use. If this is not showing the correct one, review the order processing in the Policy tab and make sure the correct Policy is being applied.
This guide from the online docs explains more about using Policies in the Cloud Manager
Managing Policies (In Centrify Cloud Manager)
I hope this helps!
Ryan V.