Wire #3

Direction: Outbound (we called the supplier)
Document: PunchOutSetupRequest
URL: POST https://public.demo.borong.com/punchout/setup-request
Status: 200 · 872 ms
When: 2026-09-06 15:11:24

Request headers

Content-Type: text/xml; charset=utf-8
Accept: text/xml, application/xml
Content-Length: 2646
User-Agent: PunchOut Mock Host 1.0

Request body

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.021/cXML.dtd">
<cXML payloadID="1788678684.10001.90187@punchout.demo.borong.com" timestamp="2026-09-06T15:11:24+08:00" xml:lang="en-US">
  <Header>
    <From>
      <Credential domain="NetworkID">
        <Identity>DEMO-BUYER</Identity>
      </Credential>
    </From>
    <To>
      <Credential domain="NetworkID">
        <Identity>DROPEE</Identity>
      </Credential>
    </To>
    <Sender>
      <Credential domain="NetworkID">
        <Identity>DEMO-BUYER</Identity>
        <SharedSecret>demo-secret</SharedSecret>
      </Credential>
      <UserAgent>PunchOut Mock Host 1.0</UserAgent>
    </Sender>
  </Header>
  <Request deploymentMode="test">
    <PunchOutSetupRequest operation="create">
      <BuyerCookie>BC-40A7B0DC428F79D4</BuyerCookie>
      <Extrinsic name="FirstName">Tania</Extrinsic>
      <Extrinsic name="LastName">Marican</Extrinsic>
      <Extrinsic name="UserFullName">Tania Marican</Extrinsic>
      <Extrinsic name="UniqueName">tania.marican@demo-buyer.test</Extrinsic>
      <Extrinsic name="UserEmail">tania.marican@demo-buyer.test</Extrinsic>
      <Extrinsic name="Department">OPU-1000</Extrinsic>
      <Extrinsic name="UserId">ACC20</Extrinsic>
      <Extrinsic name="PhoneNumber">60312345020</Extrinsic>
      <BrowserFormPost>
        <URL>https://punchout.demo.borong.com/punchout/return</URL>
      </BrowserFormPost>
      <Contact role="endUser">
        <Name xml:lang="en">Tania Marican</Name>
        <Email>tania.marican@demo-buyer.test</Email>
      </Contact>
      <SupplierSetup>
        <URL>https://public.demo.borong.com/punchout/setup-request</URL>
      </SupplierSetup>
      <ShipTo>
        <Address addressID="ADDR-1003">
          <Name xml:lang="en">HQ Engineering</Name>
          <PostalAddress name="default">
            <DeliverTo>Tania Marican</DeliverTo>
            <Street>Level 21, Menara Utama</Street>
            <Street>Jalan Ampang</Street>
            <City>Kuala Lumpur</City>
            <State>Kuala Lumpur KUL</State>
            <PostalCode>50450</PostalCode>
            <Country isoCountryCode="MY">Malaysia</Country>
          </PostalAddress>
          <Email name="default">tania.marican@demo-buyer.test</Email>
          <Phone name="work">
            <TelephoneNumber>
              <CountryCode isoCountryCode="MY">00</CountryCode>
              <AreaOrCityCode>00</AreaOrCityCode>
              <Number>60312345020</Number>
            </TelephoneNumber>
          </Phone>
        </Address>
      </ShipTo>
    </PunchOutSetupRequest>
  </Request>
</cXML>

Response headers

HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Content-Type: application/xml
Connection: close
X-Powered-By: PHP/8.4.25
Cache-Control: no-cache, private
Date: Sun, 06 Sep 2026 07:11:24 GMT
charset: utf-8
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImcybTZtaUxPSTRGZmJ6OUJjRmJJb0E9PSIsInZhbHVlIjoiNDR0OFEzUmM3VW1xaFRYMTRLbDRacEI5K3NCNnpsalFrbElqeTRJMEREWkU2RTRlaEYvZENpOXZWRlNCY3laTnJZbkdtUDJ2Tkw3NlhkMzg3aFcrN21MWHoxMGs3QVA1WUZNVFF6WDRrS3RpVXZDb21EK1NiK0d2WHVIenVHOFYiLCJtYWMiOiIyOTUxOTBmYmFkYTFiZWQyZTgxYTJmZmRkOTYyNmYzNGJmYjI1ZmRjZTQxMjc1MDljZjA1NTc3MjJlMzc5OTNlIiwidGFnIjoiIn0%3D; expires=Sun, 06 Sep 2026 09:11:24 GMT; Max-Age=7200; path=/; secure; samesite=lax
Set-Cookie: borong_public_demo_session=eyJpdiI6IlU2T0U0QnBTb2k2c0Robm5NNGc0dHc9PSIsInZhbHVlIjoib0U1N0ltcFNVVndrYWE2VnhyVmRkWlRXNUdwK0ZFaTh4UVhlakREYXEyS2JSU25RL3plMTBRQ1hzVXlWMDh3Z045Q2hiNWxTaTMyd2dGbmltMTIrSmlrRGFiUVgyY25pZkRHMGdVcDYzM0hkQ2hkUVFybnRvYndDdXZ0TkF2MDUiLCJtYWMiOiJkM2RmNWM5NWJjZmYxNGU2MzRmMGIxOGU4YWZlNTdlM2Y0YWMxNGYxNDNlNzhmYjQ0YTVhYWQ3YTlhZDY0ODY0IiwidGFnIjoiIn0%3D; expires=Sun, 06 Sep 2026 09:11:24 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax

Response body

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.021/cXML.dtd">
<cXML xml:lang="en-US" payloadID="1788678684.10001.65408@dropee.com" timestamp="2026-09-06T07:11:24">
  <Response>
    <Status code="200" text="OK"/>
    <PunchOutSetupResponse>
      <StartPage>
        <URL>https://public.demo.borong.com/punchout/login/yi4dnKn0qXiz7F8VGiH3pWFdGjMXFQ</URL>
      </StartPage>
    </PunchOutSetupResponse>
  </Response>
</cXML>