PunchOut Mock Host

Wire #9

Direction
Outbound (we called the supplier)
Document
PunchOutSetupRequest
URL
POST https://public.demo.borong.com/punchout/setup-request
Status
200 · 311 ms
When
2026-09-06 15:30:49
Request headers
Content-Type: text/xml; charset=utf-8
Accept: text/xml, application/xml
Content-Length: 2629
User-Agent: PunchOut Mock Host 1.0
Request body
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.021/cXML.dtd">
<cXML payloadID="1788679848.10001.94411@punchout.demo.borong.com" timestamp="2026-09-06T15:30:48+08:00" xml:lang="en-US">
  <Header>
    <From>
      <Credential domain="NetworkID">
        <Identity>DEMO-BUYER</Identity>
      </Credential>
    </From>
    <To>
      <Credential domain="NetworkID">
        <Identity>DROPEE</Identity>
      </Credential>
    </To>
    <Sender>
      <Credential domain="NetworkID">
        <Identity>DEMO-BUYER</Identity>
        <SharedSecret>demo-secret</SharedSecret>
      </Credential>
      <UserAgent>PunchOut Mock Host 1.0</UserAgent>
    </Sender>
  </Header>
  <Request deploymentMode="test">
    <PunchOutSetupRequest operation="create">
      <BuyerCookie>BC-4095B190D55A6492</BuyerCookie>
      <Extrinsic name="FirstName">Chan</Extrinsic>
      <Extrinsic name="LastName">Wei Ling</Extrinsic>
      <Extrinsic name="UserFullName">Chan Wei Ling</Extrinsic>
      <Extrinsic name="UniqueName">chan.weiling@demo-buyer.test</Extrinsic>
      <Extrinsic name="UserEmail">chan.weiling@demo-buyer.test</Extrinsic>
      <Extrinsic name="Department">OPU-2000</Extrinsic>
      <Extrinsic name="UserId">ACC3</Extrinsic>
      <Extrinsic name="PhoneNumber">60355501003</Extrinsic>
      <BrowserFormPost>
        <URL>https://punchout.demo.borong.com/punchout/return</URL>
      </BrowserFormPost>
      <Contact role="endUser">
        <Name xml:lang="en">Chan Wei Ling</Name>
        <Email>chan.weiling@demo-buyer.test</Email>
      </Contact>
      <SupplierSetup>
        <URL>https://public.demo.borong.com/punchout/setup-request</URL>
      </SupplierSetup>
      <ShipTo>
        <Address addressID="ADDR-2001">
          <Name xml:lang="en">Shah Alam Plant</Name>
          <PostalAddress name="default">
            <DeliverTo>Chan Wei Ling</DeliverTo>
            <Street>Lot 12, Persiaran Kerjaya</Street>
            <Street>Seksyen 23</Street>
            <City>Shah Alam</City>
            <State>MYSEL</State>
            <PostalCode>40300</PostalCode>
            <Country isoCountryCode="MY">Malaysia</Country>
          </PostalAddress>
          <Email name="default">chan.weiling@demo-buyer.test</Email>
          <Phone name="work">
            <TelephoneNumber>
              <CountryCode isoCountryCode="MY">00</CountryCode>
              <AreaOrCityCode>00</AreaOrCityCode>
              <Number>60355501003</Number>
            </TelephoneNumber>
          </Phone>
        </Address>
      </ShipTo>
    </PunchOutSetupRequest>
  </Request>
</cXML>
Response headers
HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Content-Type: application/xml
Connection: close
X-Powered-By: PHP/8.4.25
Cache-Control: no-cache, private
Date: Sun, 06 Sep 2026 07:30:48 GMT
charset: utf-8
Set-Cookie: XSRF-TOKEN=eyJpdiI6Im1kM1k3TUJmdUxzQnpLNXdmVGE2eEE9PSIsInZhbHVlIjoiTituV3Zwbzd1YzhQTVdoSEJRUEloV2FVTFllNEt0b3BKZ0JwS0Q1L0dMU2tBL2JWVEVtb3grQStPWTVsVlJqeUYzVDUxNWJmSjg4dkE5OElyRGlUNytYc1lOTFYwM09LSHJyZ1gxVUREVktwMkFsaElYcGJlcHRuZnczaHhJZ3AiLCJtYWMiOiJlMGY5MTdlMzMzZDg1YTlkNmJlZjVjMTQxM2NjZjk0NGNkNmZkNmQ1NzQyM2E2Zjk4NjU4ZDk5Nzc2NzNkMjE2IiwidGFnIjoiIn0%3D; expires=Sun, 06 Sep 2026 09:30:48 GMT; Max-Age=7199; path=/; secure; samesite=lax
Set-Cookie: borong_public_demo_session=eyJpdiI6IjNhYVpCdStkUGtUcEd6UUVUdGZod3c9PSIsInZhbHVlIjoiSFVReUYvOUpoTlA2dWdYVkZVdzlJYXVlaDJXcFpJdzRHdnpEZm1SKy9WdUZ4ZnYzRnptMVRDUzJNV28yZXh3T0FLeDFoQ0tjRTRMbWxJRlgrVkVDNWRxVzBrZnU5NnJKU0VlYmZnV1hhN1dpYkxwWit0OGlya3JIY1NvUmVBSnoiLCJtYWMiOiJhMjI2MzNiYjYxYzQ3MmEyZjE4MTYxYTMyNDg3MjQzODNhYjY4MmUzZTUxMDUxM2M0MWE1MjYwNWI0NGVjZThlIiwidGFnIjoiIn0%3D; expires=Sun, 06 Sep 2026 09:30:48 GMT; Max-Age=7199; path=/; secure; httponly; samesite=lax
Response body
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cXML SYSTEM "http://xml.cxml.org/schemas/cXML/1.2.021/cXML.dtd">
<cXML xml:lang="en-US" payloadID="1788679848.10001.30434@dropee.com" timestamp="2026-09-06T07:30:48">
  <Response>
    <Status code="200" text="OK"/>
    <PunchOutSetupResponse>
      <StartPage>
        <URL>https://public.demo.borong.com/punchout/login/WJBJCPxdSsVbjuwW0ju0jI5fIlIL63</URL>
      </StartPage>
    </PunchOutSetupResponse>
  </Response>
</cXML>