diff --git a/castellan/key_manager/barbican_key_manager.py b/castellan/key_manager/barbican_key_manager.py
index 0fe63b8..9d01c84 100644
--- a/castellan/key_manager/barbican_key_manager.py
+++ b/castellan/key_manager/barbican_key_manager.py
@@ -193,7 +193,8 @@
             return barbican.barbican_endpoint
         elif getattr(auth, 'service_catalog', None):
             endpoint_data = auth.service_catalog.endpoint_data_for(
-                service_type='key-manager')
+                service_type='key-manager',
+                interface=barbican.barbican_endpoint_type)
             return endpoint_data.url
         else:
             service_parameters = {'service_type': 'key-manager',
diff --git a/releasenotes/notes/use-barbican-endpoint-type-config-option-e583d30930cc22ba.yaml b/releasenotes/notes/use-barbican-endpoint-type-config-option-e583d30930cc22ba.yaml
new file mode 100644
index 0000000..11baafd
--- /dev/null
+++ b/releasenotes/notes/use-barbican-endpoint-type-config-option-e583d30930cc22ba.yaml
@@ -0,0 +1,6 @@
+---
+fixes:
+  - |
+    ``barbican_endpoint_type`` is now used to retrieve Barbican endpoint URL
+    from service catalog. This config option is set to 'public' by default so
+    it will not change the current behaviour.