By default a page with status 403 is sent as a response in case of a failed one-shot authentication request. Airlock allows to return a custom response document to such a request.
To define your own response, follow these steps:
Authentication.Implicit.ErrorPath "/error_path/one_shot_fail.asis"