staring w/MSAL .NET 4.24, MSAL .NET supports passing .WithForceRefresh to acquire token by obo. Include this w/the obo builder in identity web.