You can specify the response status code to send if policy evaluation fails.

You include a rejection handler in a rule by clicking to expand Advanced on the Create Rule window.

PingAccess contains three predefined rejection handlers:
Default API Rejection Handler
Returns a 403 status code in a JSONJSON (JavaScript Object Notation) An open, lightweight data-interchange format that uses human-readable text to store and transmit data. template.
Default Rate Limiting Rejection Handler
Returns a 429 status code in a JSON template.
Default Web Rejection Handler
Returns a 403 status code in an HTML template.