In the Privilege Cloud Shared Services model, user access and MFA are driven through CyberArk Identity
/ Shared Services, and CyberArk publishes a dedicated list of "MFA options in Shared Services" for the user portal and supported challenges.
In CyberArk PAM Self-Hosted, MFA is typically achieved by enabling and integrating additional authentication methods such as RADIUS, SAML, PKI, LDAP, Windows, CyberArk, etc., depending on the organization's design.
So, the accurate comparison is that Privilege Cloud (Shared Services) leverages CyberArk Identity, while PAM Self-Hosted relies on enabling/integrating the relevant authentication/MFA methods in the self- hosted environment # B.