CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault. This is how the system enforces license compliance, ensuring that the allocated licenses are not exceeded.