diff --git a/os_client_config/cloud_config.py b/os_client_config/cloud_config.py
index 776ea8a..89e070f 100644
--- a/os_client_config/cloud_config.py
+++ b/os_client_config/cloud_config.py
@@ -366,12 +366,6 @@ class CloudConfig(object):
             service_key, min_version=min_version, max_version=max_version)
         endpoint_override = self.get_endpoint(service_key)
 
-        if not interface_key:
-            if service_key in ('image', 'key-manager'):
-                interface_key = 'interface'
-            else:
-                interface_key = 'endpoint_type'
-
         if service_key == 'object-store':
             constructor_kwargs = dict(
                 session=self.get_session(),
@@ -404,10 +398,6 @@ class CloudConfig(object):
             if not endpoint_override:
                 constructor_kwargs['endpoint_override'] = endpoint
         constructor_kwargs.update(kwargs)
-        if service_key == 'object-store':
-            constructor_kwargs['os_options'][interface_key] = interface
-        else:
-            constructor_kwargs[interface_key] = interface
         if pass_version_arg and service_key != 'object-store':
             if not version:
                 version = self.get_api_version(service_key)
@@ -451,6 +441,19 @@ class CloudConfig(object):
             constructor_kwargs['username'] = None
             constructor_kwargs['password'] = None
 
+        if not interface_key:
+            if service_key in ('image', 'key-manager'):
+                interface_key = 'interface'
+            elif (service_key == 'identity'
+                  and version and version.startswith('3')):
+                interface_key = 'interface'
+            else:
+                interface_key = 'endpoint_type'
+        if service_key == 'object-store':
+            constructor_kwargs['os_options'][interface_key] = interface
+        else:
+            constructor_kwargs[interface_key] = interface
+
         return client_class(**constructor_kwargs)
 
     def get_cache_expiration_time(self):
diff --git a/os_client_config/tests/test_cloud_config.py b/os_client_config/tests/test_cloud_config.py
index 3ec7ecf..8135526 100644
--- a/os_client_config/tests/test_cloud_config.py
+++ b/os_client_config/tests/test_cloud_config.py
@@ -570,7 +570,7 @@ class TestCloudConfig(base.TestCase):
         mock_client.assert_called_with(
             version='3',
             endpoint='http://example.com',
-            endpoint_type='admin',
+            interface='admin',
             endpoint_override=None,
             region_name='region-al',
             service_type='identity',