8. A method comprising: receiving a request for a document from a first entity by a cloud service participating in a federated identity platform, the request including an identifier associated with a second entity, the cloud service having a plurality of tenants; comparing the identifier to a set of tenant identifiers each corresponding to one of the plurality of tenants to determine whether the second entity is one of the plurality of tenants; generating a fictitious response in response to the request based on the determination; and sending the generated fictitious response to the first entity, thereby obfuscating whether the second entity is one of the plurality of tenants, wherein the process of generating the fictitious response comprises: generating a certificate; generating a fictitious version of the document; and digitally signing the generated fictitious version of the document using the generated certificate.
8. A method comprising: receiving a request for a document from a first entity by a cloud service participating in a federated identity platform, the request including an identifier associated with a second entity, the cloud service having a plurality of tenants; comparing the identifier to a set of tenant identifiers each corresponding to one of the plurality of tenants to determine whether the second entity is one of the plurality of tenants; generating a fictitious response in response to the request based on the determination; and sending the generated fictitious response to the first entity, thereby obfuscating whether the second entity is one of the plurality of tenants, wherein the process of generating the fictitious response comprises: generating a certificate; generating a fictitious version of the document; and digitally signing the generated fictitious version of the document using the generated certificate. 11. The method of claim 8 , wherein generating the fictitious response comprises generating a fictitious response in accordance with a security assertion markup language.