Wire #6

Direction: Outbound (we called the supplier)
Document: PunchOutSetupRequest
URL: POST https://public.demo.borong.com/punchout/setup-request
Status: 200 · 133 ms
When: 2026-09-06 15:22:21

Request headers

Content-Type: text/xml; charset=utf-8
Accept: text/xml, application/xml
Content-Length: 2634
User-Agent: PunchOut Mock Host 1.0

Request body

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.021/cXML.dtd">
<cXML payloadID="1788679341.10001.30797@punchout.demo.borong.com" timestamp="2026-09-06T15:22:21+08:00" xml:lang="en-US">
  <Header>
    <From>
      <Credential domain="NetworkID">
        <Identity>DEMO-BUYER</Identity>
      </Credential>
    </From>
    <To>
      <Credential domain="NetworkID">
        <Identity>DROPEE</Identity>
      </Credential>
    </To>
    <Sender>
      <Credential domain="NetworkID">
        <Identity>DEMO-BUYER</Identity>
        <SharedSecret>demo-secret</SharedSecret>
      </Credential>
      <UserAgent>PunchOut Mock Host 1.0</UserAgent>
    </Sender>
  </Header>
  <Request deploymentMode="test">
    <PunchOutSetupRequest operation="create">
      <BuyerCookie>BC-D368587944C8C335</BuyerCookie>
      <Extrinsic name="FirstName">Aisyah</Extrinsic>
      <Extrinsic name="LastName">Rahman</Extrinsic>
      <Extrinsic name="UserFullName">Aisyah Rahman</Extrinsic>
      <Extrinsic name="UniqueName">aisyah.rahman@demo-buyer.test</Extrinsic>
      <Extrinsic name="UserEmail">aisyah.rahman@demo-buyer.test</Extrinsic>
      <Extrinsic name="Department">OPU-1000</Extrinsic>
      <Extrinsic name="UserId">ACC1</Extrinsic>
      <Extrinsic name="PhoneNumber">60312345001</Extrinsic>
      <BrowserFormPost>
        <URL>https://punchout.demo.borong.com/punchout/return</URL>
      </BrowserFormPost>
      <Contact role="endUser">
        <Name xml:lang="en">Aisyah Rahman</Name>
        <Email>aisyah.rahman@demo-buyer.test</Email>
      </Contact>
      <SupplierSetup>
        <URL>https://public.demo.borong.com/punchout/setup-request</URL>
      </SupplierSetup>
      <ShipTo>
        <Address addressID="ADDR-1001">
          <Name xml:lang="en">HQ Procurement</Name>
          <PostalAddress name="default">
            <DeliverTo>Aisyah Rahman</DeliverTo>
            <Street>Level 32, Menara Utama</Street>
            <Street>Jalan Ampang</Street>
            <City>Kuala Lumpur</City>
            <State>MYKUL</State>
            <PostalCode>50450</PostalCode>
            <Country isoCountryCode="MY">Malaysia</Country>
          </PostalAddress>
          <Email name="default">aisyah.rahman@demo-buyer.test</Email>
          <Phone name="work">
            <TelephoneNumber>
              <CountryCode isoCountryCode="MY">00</CountryCode>
              <AreaOrCityCode>00</AreaOrCityCode>
              <Number>60312345001</Number>
            </TelephoneNumber>
          </Phone>
        </Address>
      </ShipTo>
    </PunchOutSetupRequest>
  </Request>
</cXML>

Response headers

HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Content-Type: application/xml
Connection: close
X-Powered-By: PHP/8.4.25
Cache-Control: no-cache, private
Date: Sun, 06 Sep 2026 07:22:21 GMT
charset: utf-8
Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik85NXVQcVFoeGZSR00reVRuRURjOWc9PSIsInZhbHVlIjoiMVFINlJNYlZJWEN0WHptWXlJcWIvWlQ2TW9vWjFhc2lFWllucFpKUFN2OW1CWExPOWc1RFJwMkdtN05MMDBVcnIxTi8raEt1MUlpQkhCSE1hWkdUVlZSYTlsLzgxWXVrRmlCWElwcXBZelI5MjZqNDJRNVMzRnNvL0taUE9MemciLCJtYWMiOiI1NTMyMTA4MTg2ZTA0ZTk3OGY2ZmFlMDhhMTJiMmRhYWUwMGZmMTZiNGRmM2JlNGQ5YzhhZmQ1MWI0YjIwODI3IiwidGFnIjoiIn0%3D; expires=Sun, 06 Sep 2026 09:22:21 GMT; Max-Age=7200; path=/; secure; samesite=lax
Set-Cookie: borong_public_demo_session=eyJpdiI6IkVVcURScHpNT1BBd2JzdWxxbXRvdWc9PSIsInZhbHVlIjoiZ05vYlZmdTFDcVNyMExBdlJNRjNacExLdEE3TmVvUitNdENldUFNY1l0OURERVg0MXlJcG1Vc3R5Z2NLcUZiSG92ZzkrZG5QdGpnTFdDaGNPSk9zWjBWMlJkekpwUVZURUpwbWZYSFFNOFN1VnlQSnR2YWJPaVYwMTVqdHdWaEoiLCJtYWMiOiI0MGE0MmFiOWI0NGMyMzc5ZDJhNjdkYzEwODJlNjQzMzdkNmRmOWEyNmQ1M2M3NTM2NDFlNGYxZjRlNDYzN2E1IiwidGFnIjoiIn0%3D; expires=Sun, 06 Sep 2026 09:22:21 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax

Response body

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.021/cXML.dtd">
<cXML xml:lang="en-US" payloadID="1788679341.10001.41899@dropee.com" timestamp="2026-09-06T07:22:21">
  <Response>
    <Status code="200" text="OK"/>
    <PunchOutSetupResponse>
      <StartPage>
        <URL>https://public.demo.borong.com/punchout/login/58RlItOaWXZZ9IKyP9yKTSbVdGBtRL</URL>
      </StartPage>
    </PunchOutSetupResponse>
  </Response>
</cXML>