● B2B Suite · PunchOut · Release Q1 2027
PunchOut for Magento Open Source and Mage-OS, over cXML.
Your customer's buyers start in their procurement system, shop your store as a member of their company and send the cart back for approval. Part of the qoliber B2B Suite: release Q1 2027, early access on request.
● How it works
Four steps, start to finish.
- 01
Setup
The procurement system posts a cXML request to the store. The store checks it against the company's From credential and shared secret, and always answers in cXML.
- 02
Start
The answer carries a one-time start address, valid for five minutes. It signs the buyer in as a member of that company.
- 03
Shop
The buyer shops for that company. During the visit the checkout leads back to the cart, so no order is placed in the store.
- 04
Transfer
From the cart, a cXML PunchOutOrderMessage goes back to the procurement system, which orders through its own approval. The store's cart is emptied.
● What's included
The details that matter.
Connections per company
Each company has its buyer's From credential, the shared secret its requests carry and a default member. The secret is stored encrypted.
The right member
The buyer is matched to an active company member by email. Without a match, the connection's default member shops.
One company per visit
A member of several companies is switched to the session's company and cannot switch away during the visit.
Classified items
Every line carries the classification cXML requires: the product's code from an attribute (UNSPSC by default), or a default you set.
Session expiry
Sessions are kept per company with the buyer cookie and return address. They expire after 24 hours by default, and old ones are deleted after 90 days.
Safe parsing
External references in a request are never fetched, and a document with an inline DTD is refused.
- The procurement system's OrderRequest. Orders reach the store by the channel you agree with the buyer, such as email, EDI or the buyer's own account.
- Cart restore for the edit and inspect operations.
- OCI.
● Questions
Before you ask.
What is PunchOut?
PunchOut lets a buyer open a supplier's store from inside a procurement system, fill a cart there and send it back instead of ordering. The procurement system then runs its own approval.
Which procurement systems does it work with?
Systems that use cXML PunchOut, such as SAP Ariba, Coupa and Jaggaer. Our tests check what the store sends against the cXML 1.2.014 DTD, not against each of those systems, so run a test connection with every buyer before going live.
Is an order placed in the store during PunchOut?
No. During a PunchOut visit the checkout leads back to the cart and no order is placed on any channel of the visit.
Does it support OCI?
Not yet. PunchOut covers cXML level 1.
When can I use it?
The B2B Suite release is planned for Q1 2027, and early access is granted on request.
More B2B Suite features
● Release Q1 2027
Start before the release.
Early access is granted on request. Tell us about your store or project and we'll get back to you within one business day.