Cloudpasswordpolicyforpasswordsyncedusersenabled [new] -

However, if the user leaves the organization or fails to update their on-premises password, the on-premises expiration status does not block cloud access.