diff --git a/recipes/setup.rb b/recipes/setup.rb
index 4ac97eb..5ac1ef1 100644
--- a/recipes/setup.rb
+++ b/recipes/setup.rb
@@ -36,7 +36,9 @@ platform_options['tempest_packages'].each do |pkg|
 end
 
 identity_admin_endpoint = admin_endpoint 'identity-admin'
-identity_api_endpoint   = internal_endpoint 'identity-api'
+# Since this is testing things from the user's perspective,
+# use the public identity endpoint
+identity_api_endpoint   = public_endpoint 'identity-api'
 bootstrap_token         = get_secret 'openstack_identity_bootstrap_token'
 auth_uri                = ::URI.decode identity_admin_endpoint.to_s
 admin_pass              = get_password 'user', node['openstack']['identity']['admin_user']