If you are referring to WebSEAL, the easiest way to differentiate the responses is to add the junction response code to the WebSEAL request log (controlled by the ‘%c’ format specifier to the request-log-format configuration entry), in addition to the returned response code (‘%s’).
I hope that this helps.
Scott A. Exton
Senior Software Engineer
Chief Programmer - IBM Security Verify Access
IBM Master Inventor