We are seeing frequent errors in our logs when attempting to use Rest api calls that indicate the refresh token is not available.  We are using open id authentication and have create an authentication profile to pass the token and have checked the box to retrieve a refresh token.   It has been mentioned that the IDP - which in our case is PingFed -  may not be passing the refresh token back to us.   The question is, are there specific settings in Ping Fed we need  to set to support this,  and how can I prove we have requested the refresh and did not get it other than that error message?   Can I log this refresh request to PingFed so I can provide my logs to PingFed team members?