Skip to main content

Why are cXML URLs not used in PunchOut group setup?

Procurify requires a Purchase Order Request URL from PunchOut vendors rather than a direct cXML URL. Procurify handles the cXML connection automatically, including session creation, authentication, and message formatting, so vendors do not need to supply a separate cXML endpoint during setup.

Entering a cXML URL into the Purchase Order Request URL field will disrupt the authentication flow and typically causes errors such as 403 Forbidden responses or failed PunchOut login attempts.


To set up PunchOut correctly, enter the values provided by the vendor into the following fields:

  • Purchase Order Request URL

  • From Identity

  • Shared Secret

It is recommended to confirm these values directly with the vendor to ensure a smooth integration.

Note: Procurify does not transmit credit card information via cXML for PunchOut orders. Ensure an alternative payment method is arranged before go-live.

Did this answer your question?