Using the OAuth2 refresh_token grant to refresh OIDC server-side provisional account tokens is deprecated. Re-authenticate using a fresh provider token instead.
If you are using OIDC server-side authentication
for provisional accounts, a refresh_token is returned — but using it via the OAuth2 refresh_token grant is now
deprecated.
This brings OIDC in line with all other provisional account authentication methods: when the token
expires, re-authenticate using a fresh provider token and pass the new access token to Client::UpdateToken.
See the Refreshing Access Tokens section for details.