i have a problem. i want to be able to report the reason for the authentication error to client. For example that the user is locked out. But, unfortunately, at the end of the policy, the access policy gives only the fact of denied, without reason
i'm explain. when i use access policy without oauth profile - i can create custom response if result access policy is denied, like in this topic
