Procurify requires PunchOut vendors to provide a Purchase Order Request URL rather than a direct cXML URL because the platform automatically generates and manages the cXML connection behind the scenes.
This design ensures a consistent and secure PunchOut experience by handling cXML session creation, authentication, and message formatting internally. As a result, vendors do not need to supply a separate cXML endpoint during setup.
Entering a cXML URL into the Purchase Order Request URL field can disrupt the authentication flow and often results in errors such as 403 Forbidden responses or failed PunchOut login attempts.
To avoid these issues, please ensure the following fields are entered exactly as provided by the vendor:
Purchase Order Request URL
From Identity
Shared Secret
Using the correct values allows Procurify to successfully establish and maintain the PunchOut connection.