The code XML attribute may contain any of the ID-WSF defined status codes, see [SOAPBinding2] Table 2 on pp.12-13, including the special value "OK" to indicate success. It may also contain any application specific status indications, provided that they are qualified to their own namespace using URN or URL constructs. Finally it may contain any of the following TAS3 defined status codes:
Operation denied by authorization layer
Operation not applicable from authorization perspective
Operation's status can not be determined by the authorization layer
Operation denied due to required signature missing.
Operation denied due to signature validation problem.
Expiry time or audience restriction did not validate.