Wire #4

Direction: Outbound (we called the supplier)
Document: PunchOutSetupRequest
URL: POST https://public.demo.borong.com/punchout/setup-request
Status: 200 · 341 ms
When: 2026-09-06 15:18:54

Request headers

Content-Type: text/xml; charset=utf-8
Accept: text/xml, application/xml
Content-Length: 2645
User-Agent: PunchOut Mock Host 1.0

Request body

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.021/cXML.dtd">
<cXML payloadID="1788679134.10001.48970@punchout.demo.borong.com" timestamp="2026-09-06T15:18:54+08:00" xml:lang="en-US">
  <Header>
    <From>
      <Credential domain="NetworkID">
        <Identity>DEMO-BUYER</Identity>
      </Credential>
    </From>
    <To>
      <Credential domain="NetworkID">
        <Identity>DROPEE</Identity>
      </Credential>
    </To>
    <Sender>
      <Credential domain="NetworkID">
        <Identity>DEMO-BUYER</Identity>
        <SharedSecret>demo-secret</SharedSecret>
      </Credential>
      <UserAgent>PunchOut Mock Host 1.0</UserAgent>
    </Sender>
  </Header>
  <Request deploymentMode="test">
    <PunchOutSetupRequest operation="create">
      <BuyerCookie>BC-FDCA0660566C71DA</BuyerCookie>
      <Extrinsic name="FirstName">Aisyah</Extrinsic>
      <Extrinsic name="LastName">Rahman</Extrinsic>
      <Extrinsic name="UserFullName">Aisyah Rahman</Extrinsic>
      <Extrinsic name="UniqueName">aisyah.rahman@demo-buyer.test</Extrinsic>
      <Extrinsic name="UserEmail">aisyah.rahman@demo-buyer.test</Extrinsic>
      <Extrinsic name="Department">OPU-1000</Extrinsic>
      <Extrinsic name="UserId">ACC1</Extrinsic>
      <Extrinsic name="PhoneNumber">60312345001</Extrinsic>
      <BrowserFormPost>
        <URL>https://punchout.demo.borong.com/punchout/return</URL>
      </BrowserFormPost>
      <Contact role="endUser">
        <Name xml:lang="en">Aisyah Rahman</Name>
        <Email>aisyah.rahman@demo-buyer.test</Email>
      </Contact>
      <SupplierSetup>
        <URL>https://public.demo.borong.com/punchout/setup-request</URL>
      </SupplierSetup>
      <ShipTo>
        <Address addressID="ADDR-1001">
          <Name xml:lang="en">HQ Procurement</Name>
          <PostalAddress name="default">
            <DeliverTo>Aisyah Rahman</DeliverTo>
            <Street>Level 32, Menara Utama</Street>
            <Street>Jalan Ampang</Street>
            <City>Kuala Lumpur</City>
            <State>Kuala Lumpur KUL</State>
            <PostalCode>50450</PostalCode>
            <Country isoCountryCode="MY">Malaysia</Country>
          </PostalAddress>
          <Email name="default">aisyah.rahman@demo-buyer.test</Email>
          <Phone name="work">
            <TelephoneNumber>
              <CountryCode isoCountryCode="MY">00</CountryCode>
              <AreaOrCityCode>00</AreaOrCityCode>
              <Number>60312345001</Number>
            </TelephoneNumber>
          </Phone>
        </Address>
      </ShipTo>
    </PunchOutSetupRequest>
  </Request>
</cXML>

Response headers

HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Content-Type: application/xml
Connection: close
X-Powered-By: PHP/8.4.25
Cache-Control: no-cache, private
Date: Sun, 06 Sep 2026 07:18:54 GMT
charset: utf-8
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkEvMmh2MS9PZVNYOFpOdklqUUNVVkE9PSIsInZhbHVlIjoiMll2bWdhcWszT05OalBiSm0wVStSaUZuRDM4WTdDa2VoTzNHSFoyQzBOQTFBZXg3bEJpbmZIVHRYME41YTBsOW1oUUY2OU84bXFyelQ5a29ZWWNZamlZanhkL2RZWTVoa21WL2JuN080OEQ2S0RMOWhmMTBzZ0o5bnYzTU9lNi8iLCJtYWMiOiJkYmE2MjAxZGEwMDQwMjcwMjBlMWQ3ODEzYTQ2YjczOTNiOTc2NzhkNTllNmM0NDU0ODM4YzBmZmI2ZWMzMWUyIiwidGFnIjoiIn0%3D; expires=Sun, 06 Sep 2026 09:18:54 GMT; Max-Age=7200; path=/; secure; samesite=lax
Set-Cookie: borong_public_demo_session=eyJpdiI6InVJS2xKcFFQWUFlRzNsbU5CVElUNWc9PSIsInZhbHVlIjoiNjBseXZNOWtpSWdFNjBKM0tDOG5zbndsWVAyUk5XU3J3dzRJclpTRklhbzk0dFdKSHA5UlNJeTlDWnFuNVgra01aZnRpZERGN1JJTW9pT3MzWW9xQ1VvQlRpUkhKYzNPbVQxcHhRaGcxQUV3bkd0ZDFoTENzQVNXS3VDUGFOSkkiLCJtYWMiOiIyNzY5MDQ2YzNjOGU1MjljYzFjMjU1YmU1OThjYjhkZGRlOTU5OGZkMGIwNWIxZWYzNjczNmM4ZTg1NDMyZTE3IiwidGFnIjoiIn0%3D; expires=Sun, 06 Sep 2026 09:18:54 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax

Response body

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.021/cXML.dtd">
<cXML xml:lang="en-US" payloadID="1788679134.10001.56250@dropee.com" timestamp="2026-09-06T07:18:54">
  <Response>
    <Status code="200" text="OK"/>
    <PunchOutSetupResponse>
      <StartPage>
        <URL>https://public.demo.borong.com/punchout/login/IhqjvSkPh7Gk7cXigLHJoF0yl9Ttpu</URL>
      </StartPage>
    </PunchOutSetupResponse>
  </Response>
</cXML>