> It's just not clear to us whether this issue the RP is reporting > is something on our end or theirs. Would take more logging/tracing of the refresh token-using token request and see what the audit logging says. If it's really getting an error back from the token request, that would get logged. -- Scott