PingFederate 7.2 R2 introduced the capability to map attributes from initial authentication context to an access token attribute contract, which requires an update in the OAuth grant datastore.
If you are upgrading from PingFederate 7.2.1 or an earlier version with OAuth use cases, run the table-setup script, <pf_install>/pingfederate/server/default/conf/access-grant/sql-scripts/access-grant-attribute-<database>.sql, for your database server.