Everything the Magento & Adobe Commerce punchout extension does, for both cXML and OCI: what is new in 1.3.23, the core punchout flow, enterprise configuration, platform compatibility and security.
Release notes
Released 17 September 2026. Every item below applies to both cXML and OCI punchout sessions.
Translate your catalogue units into the codes each buyer expects (e.g. STK → H87, m2 → MTK), set in a simple grid in the admin. One map covers both cXML and OCI.
The punchout session, the embedded (iframe) storefront and the "Transfer to Punchout" button all work on Hyvä out of the box.
OCI buyers can shop inside their procurement system's iframe, just like cXML buyers.
Populate any Magento customer attribute automatically at punchout login, configured per client.
Automatically link punchout buyers to their Magento Company on login, so corporate accounts, catalogs, and approval rules apply instantly with zero manual setup.
Onboard new buyers in seconds. A single button on the client page copies the From/To/Sender domains, shared secret, and Login & PO URLs as a ready-to-send block — straight into an email to the buyer's eProcurement team.
Certified and ready for the latest Magento Open Source and Adobe Commerce release, with full PHP 8.3 / 8.4 compatibility.
A dedicated admin grid that displays all orders placed through punchout sessions (both cXML and OCI). Each row links to Magento's standard order detail view. This gives merchants a single view of all procurement-originated orders without digging through the full order list. Located at Takeoff > Punchout Orders.
A real-time log viewer that displays API request/response data. Logs can be filtered by Protocol Type (cXML or OCI), Endpoint, Client ID, and HTTP Status Code. Each log entry shows the Date, Protocol, Endpoint, Client ID, Status Code, and IP Address. Clicking into an entry reveals the full request and response payloads. This is essential for debugging integration issues and monitoring punchout session health. Located at Takeoff > Punchout Logs.
A usage analytics dashboard showing all users who have logged in via punchout. Displays each user's Email, Name, Client, Protocol (cXML/OCI), Login Count, Transfer Count (basket sends), and Last Login date. Filterable by protocol type. Clicking "View Sessions" shows a detailed session history for each user. This helps merchants understand buyer engagement and track individual user activity across punchout sessions. Located at Takeoff > Punchout Users.
An analytics report showing the most frequently transferred products across all punchout sessions. Displays SKU, Product Name, Times Transferred, and Total Quantity for the top 50 items. This helps merchants identify which products are most popular with their B2B procurement buyers and can inform inventory planning and catalog optimization. Located at Takeoff > Top Items Report.
A per-client configuration option that controls where buyers land after punchout authentication. Set in each client's configuration under "Redirect Path After Login". This allows merchants to customize the post-login experience for different procurement clients, directing them to specific categories, landing pages, or custom storefronts based on their needs.
cXML Protocol
The complete procurement automation solution your enterprise B2B customers demand, from punchout login through order, invoice and shipment.
Customers can log in to your Magento store directly from their eProcurement systems via cXML Punchout. Each client receives their own unique punchout URL with dedicated credentials (From/To Domain and Identity, Sender credentials, and Shared Secret) for secure authentication.
Effortlessly transfer shopping cart details from your Magento store to your customer's eProcurement system with a single click. The standard "Proceed to Checkout" button is replaced with "Transfer to Punchout" during punchout sessions, streamlining the purchasing process while maintaining all customizations, special pricing, customer-specific rules, and discounts.
Automatically receive and process orders placed from your customers' eProcurement systems directly in Magento, ensuring smooth and consistent order management. Configure custom payment methods, delivery methods, and order status settings for each client to match their specific procurement workflows.
Automatically send cXML invoice documents to client eProcurement systems upon invoice generation. Configure unique endpoint URLs, authentication credentials (From/To Domain, From/To Identity), and shared secrets for each client to ensure secure, compliant invoice delivery.
Automatically transmit Advanced Shipping Notices to client eProcurement platforms when shipments are created, keeping your customers informed about order fulfillment status in real-time.
Comprehensive logging of all outbound cXML documents (invoices and shipment notices) with detailed transmission status, HTTP response codes, timestamps, error messages, and attempt tracking.
Manually trigger invoice and shipment transmissions via Magento CLI commands for testing or immediate processing: takeoff:punchout:check-orders, takeoff:punchout:send-invoices, takeoff:punchout:send-ship-notices
View and track all items that customers have transferred from your store to their eProcurement systems. Analyze user behavior, identify popular products, and understand purchase patterns across different client organizations.
Configure product data formatting with UNSPSC classification codes and Unit of Measure attributes. Set default values or map to specific product attributes for accurate product data transmission.
Extend cXML documents with custom business-specific data fields for both line items (ItemIn) and order headers. Our extension supports customizable extrinsic data with a priority system (from_quote_item > attribute > value).
Set up and manage unlimited clients, each with their own Punchout credentials, specific custom payment methods, delivery methods, and order status settings. Every client receives a unique URL parameter and dedicated configuration for maximum flexibility.
Configure unique payment methods and delivery options for each Punchout client, allowing you to meet the specific needs of different customers. Tailor shipping calculations and payment processing to match each client's procurement policies.
Tailor the order status for each Punchout client, ensuring the right workflows and statuses are applied to each order from your clients. Configure how orders received from eProcurement systems are initially processed and tracked.
Automatically calculate and display accurate shipping costs during punchout sessions, ensuring customers see real-time delivery pricing based on their location and selected products.
Advanced enterprise capabilities including edit functionality, custom data mapping, dynamic data extraction, and sophisticated multi-store configuration. Our extension provides the flexibility needed for complex enterprise procurement scenarios.
Detailed logging of Punchout logins, order requests, invoice transmissions, and shipment notices ensures transparency and easy troubleshooting for both you and your customers. All sensitive information (shared secrets, authentication tokens) is automatically redacted from logs for enhanced security.
Supports integration with over 100 popular eProcurement systems, including Microsoft Dynamics, SAP Ariba, Coupa, Jaggaer, Oracle, Workday, SAP S/4HANA and Basware. The full list is at the bottom of this page.
Fully compatible with Magento's multi-store setup, allowing each store to have its own Punchout configurations. Manage different brands, regions, or business units with independent punchout settings while maintaining centralized control.
Connect an unlimited number of customers using Punchout, with each customer receiving their own dedicated URL and credentials, giving you ultimate flexibility and scalability as your B2B business grows.
Enterprise-grade security with multiple authentication methods including shared secrets, certificate-based authentication, and encrypted credential transmission. All sensitive information is automatically redacted from logs for enhanced security.
Each client receives unique authentication credentials including From/To Domain and Identity pairs, Sender credentials, and individual Shared Secrets. This ensures secure, isolated connections for every procurement relationship.
OCI Protocol
The complete OCI procurement automation solution your enterprise B2B customers demand, for SAP SRM, SAP MM and S/4HANA buyers.
Customers can log in to your Magento store directly from their eProcurement systems via OCI Punchout. Each client receives their own unique punchout URL with dedicated credentials and authentication parameters for secure access.
Effortlessly transfer shopping cart details from your Magento store to your customer's eProcurement system with a single click. The standard "Proceed to Checkout" button is replaced with "Transfer to Punchout" during punchout sessions, streamlining the purchasing process while maintaining all customizations, special pricing, customer-specific rules, and discounts.
Automatically receive and process orders placed from your customers' eProcurement systems directly in Magento, ensuring smooth and consistent order management. Configure custom payment methods, delivery methods, and order status settings for each client to match their specific procurement workflows.
Set up and manage unlimited clients, each with their own Punchout credentials, specific custom payment methods, delivery methods, and order status settings. Every client receives a unique URL parameter and dedicated configuration for maximum flexibility.
Configure unique payment methods and delivery options for each Punchout client, allowing you to meet the specific needs of different customers. Tailor shipping calculations and payment processing to match each client's procurement policies.
Tailor the order status for each Punchout client, ensuring the right workflows and statuses are applied to each order from your clients. Configure how orders received from eProcurement systems are initially processed and tracked.
Automatically calculate and display accurate shipping costs during punchout sessions, ensuring customers see real-time delivery pricing based on their location and selected products.
Configure product data formatting with custom field mapping. Map Magento product attributes to OCI fields with flexibility to support custom fields required by specific procurement systems.
Detailed logging of Punchout logins, order requests, and cart transfers ensures transparency and easy troubleshooting for both you and your customers. All sensitive information is automatically redacted from logs for enhanced security.
Supports integration with over 100 popular eProcurement systems, including Microsoft Dynamics, SAP Ariba, Coupa, Jaggaer, Oracle, Workday, SAP S/4HANA and Basware. The full list is at the bottom of this page.
Fully compatible with Magento's multi-store setup, allowing each store to have its own Punchout configurations. Manage different brands, regions, or business units with independent punchout settings while maintaining centralized control.
Connect an unlimited number of customers using Punchout, with each customer receiving their own dedicated URL and credentials, giving you ultimate flexibility and scalability as your B2B business grows.
Enterprise-grade security with multiple authentication methods including shared secrets and encrypted credential transmission. All sensitive information is automatically redacted from logs for enhanced security.
Each client receives unique authentication credentials and individual connection parameters. This ensures secure, isolated connections for every procurement relationship.
Compatibility
The same module connects to every platform below over cXML or OCI. Not listed? Use our free punchout tester or ask us.
…and many others.
Simple, Transparent Pricing
No per-client fees · Unlimited organisations & buyers · Both cXML & OCI included · Cancel anytime