Tie AccessProvider back to service Provider.

To issue a revokation request, I needed to know the Identity API
endpoint.  This endpoint exists in the Provider used to create the
AccessProvider.  This change threads a link back to the Provider.