diff --git a/authenticate.go b/authenticate.go
index 836c21b..d460673 100644
--- a/authenticate.go
+++ b/authenticate.go
@@ -39,9 +39,7 @@
 }
 
 // Access encapsulates the API token and its relevant fields, as well as the
-// services catalog that Identity API returns once authenticated.  You'll probably
-// rarely use this record directly, unless you intend on marshalling or unmarshalling
-// Identity API JSON records yourself.
+// services catalog that Identity API returns once authenticated.
 type Access struct {
 	Token          Token
 	ServiceCatalog []CatalogEntry
@@ -129,3 +127,10 @@
 	})
 	return access, err
 }
+
+// See AccessProvider interface definition for details.
+func (a *Access) FirstEndpointUrlByCriteria(ac ApiCriteria) string {
+	ep := FindFirstEndpointByCriteria(a.ServiceCatalog, ac)
+	urls := []string{ep.PublicURL, ep.InternalURL}
+	return urls[ac.UrlChoice]
+}