Wire #10
- Direction
- Outbound (we called the supplier)
- Document
- PunchOutSetupRequest
- URL
- POST https://public.demo.borong.com/punchout/setup-request
- Status
- 200 · 339 ms
- When
- 2026-09-06 16:20:28
Request headers
Content-Type: text/xml; charset=utf-8
Accept: text/xml, application/xml
Content-Length: 2578
User-Agent: PunchOut Mock Host 1.0
Request body
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.021/cXML.dtd">
<cXML payloadID="1788682827.10001.97248@punchout.demo.borong.com" timestamp="2026-09-06T16:20:27+08:00" xml:lang="en-US">
<Header>
<From>
<Credential domain="NetworkID">
<Identity>DEMO-BUYER</Identity>
</Credential>
</From>
<To>
<Credential domain="NetworkID">
<Identity>DROPEE</Identity>
</Credential>
</To>
<Sender>
<Credential domain="NetworkID">
<Identity>DEMO-BUYER</Identity>
<SharedSecret>demo-secret</SharedSecret>
</Credential>
<UserAgent>PunchOut Mock Host 1.0</UserAgent>
</Sender>
</Header>
<Request deploymentMode="test">
<PunchOutSetupRequest operation="create">
<BuyerCookie>BC-6E839806DE684501</BuyerCookie>
<Extrinsic name="FirstName">Khairul</Extrinsic>
<Extrinsic name="LastName">Anwar</Extrinsic>
<Extrinsic name="UserFullName">Khairul Anwar</Extrinsic>
<Extrinsic name="UniqueName">khairul.anwar@demo-buyer.test</Extrinsic>
<Extrinsic name="UserEmail">khairul.anwar@demo-buyer.test</Extrinsic>
<Extrinsic name="Department">OPU-5000</Extrinsic>
<Extrinsic name="UserId">ACC11</Extrinsic>
<Extrinsic name="PhoneNumber">60635001011</Extrinsic>
<BrowserFormPost>
<URL>https://punchout.demo.borong.com/punchout/return</URL>
</BrowserFormPost>
<Contact role="endUser">
<Name xml:lang="en">Khairul Anwar</Name>
<Email>khairul.anwar@demo-buyer.test</Email>
</Contact>
<SupplierSetup>
<URL>https://public.demo.borong.com/punchout/setup-request</URL>
</SupplierSetup>
<ShipTo>
<Address addressID="ADDR-5002">
<Name xml:lang="en">Melaka Admin</Name>
<PostalAddress name="default">
<DeliverTo>Khairul Anwar</DeliverTo>
<Street>Jalan Hang Tuah</Street>
<City>Melaka</City>
<State>MYMEL</State>
<PostalCode>75300</PostalCode>
<Country isoCountryCode="MY">Malaysia</Country>
</PostalAddress>
<Email name="default">khairul.anwar@demo-buyer.test</Email>
<Phone name="work">
<TelephoneNumber>
<CountryCode isoCountryCode="MY">00</CountryCode>
<AreaOrCityCode>00</AreaOrCityCode>
<Number>60635001011</Number>
</TelephoneNumber>
</Phone>
</Address>
</ShipTo>
</PunchOutSetupRequest>
</Request>
</cXML>
Response headers
HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Content-Type: application/xml
Connection: close
X-Powered-By: PHP/8.4.25
Cache-Control: no-cache, private
Date: Sun, 06 Sep 2026 08:20:28 GMT
charset: utf-8
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImEwa256T0R4N3E4MHkzQUM1RGEwaUE9PSIsInZhbHVlIjoicVZqSlQrMzZEd0U0NHBMWnlIZVQvMXZQVEpSZjI5dVBsdG53MjIyM05wQmtQbjgxTjRMcVhjMVBCYXlwNjhCaGFmOUdEVVQwdUtPUlhzWjljZ2Q3d3VOYVMvTzU0YjBQRUVQWUFlYXZOeDk5Q2ZIN3lCYnFEVm9GTkdSdzllejkiLCJtYWMiOiI0YzVmYTBlZTA5NThkZWY5MjM1YWY1MTQ0MGFhM2QyN2EyZDYzNDIzYzBhZDgwNWUwOGEyNjk0OWIxZjNlOWM0IiwidGFnIjoiIn0%3D; expires=Sun, 06 Sep 2026 10:20:28 GMT; Max-Age=7200; path=/; secure; samesite=lax
Set-Cookie: borong_public_demo_session=eyJpdiI6InZEdnJmbXBRTVBRV1ZsbGhlbjRaS2c9PSIsInZhbHVlIjoiR3NRa0xlTXNSd09WcDdKcDgvWG5VeHFzOXVlUzM4aXNCa2FWajdWTndkN0ZxUXhkWmw1Q1RCWW45WWhXemJFaUtSaFA5L25rSlIzdDNkalFybElwNk01QzRFcHVQYnk1RkltVzZEWk42Rk9PYzZuN3lZdzFFdGpzQktwOG1CeGkiLCJtYWMiOiJkZjgyMjIxM2Y1N2IzNDc1NTRhMzE0NGUwMmJjYWQxMDE3YzFjZWVjMzlkMGEyZTI5NmYyYWU3ZTU5YzkzZWQ4IiwidGFnIjoiIn0%3D; expires=Sun, 06 Sep 2026 10:20:28 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax
Response body
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.021/cXML.dtd">
<cXML xml:lang="en-US" payloadID="1788682827.10001.11442@dropee.com" timestamp="2026-09-06T08:20:27">
<Response>
<Status code="200" text="OK"/>
<PunchOutSetupResponse>
<StartPage>
<URL>https://public.demo.borong.com/punchout/login/h9OfjXSvaIdRqFCtcX5popFSqovQjA</URL>
</StartPage>
</PunchOutSetupResponse>
</Response>
</cXML>