How to silently re-authenticate a client to a new audience

[dan.woda]

I did a bit more investigating, and I found that a refresh token is only scoped to retrieve an access token with the same audience.

This means you will have to have your users re-authenticate to retrieve a new refresh token.