Config documents in asp.Web). its possibly that or maybe a 404. imho, it wouldn't be suitable to return 403 for something which is often accessed but you just didn't have the best qualifications. my Option will be to give an access denied information with a way to change qualifications. that https://connerqxadg.theideasblog.com/37138046/5-tips-about-401-k-rollover-you-can-use-today