You must define an entity for the response. For example:
{
"name": "AccessDeniedHandler",
"type": "org.forgerock.openig.handler.StaticResponseHandler",
"config": {
"status": 403,
"reason": "Forbidden",
"entity": "<html><h2>User does not have permission<h2>html>"
}
}
