Zum Inhalt springen
GDPR-compliant B2B shops

Punchout and OCI: Your Shop Inside Your Customers' Procurement System

Buyers at large enterprises no longer need to leave their procurement system to order from you. With OCI punchout and cXML integration, they navigate directly from SAP Ariba, Microsoft Dynamics, Jaggaer or a proprietary procurement portal into your Shopware catalogue, select items and transfer the cart back automatically. Approval workflows and invoicing remain entirely within the buyer's system.

OCI 5.0 / cXML Cart Transfer Approval-Compatible

OCI 5.0

and cXML 1.2 supported

100%

Cart transfer fully automated

50+

B2B integration projects (project experience)

24/7

Monitoring after go-live

Many large B2B customers conduct all their procurement exclusively through central purchasing platforms. Suppliers without a punchout connection are simply not considered during vendor selections. As a specialized B2B e-commerce agency, we implement OCI and cXML punchout interfaces that embed your Shopware shop seamlessly into your customers' procurement environments. The ordering process becomes so frictionless that buyers will strongly prefer your catalogue over phone calls or email.

Punchout Integration ArchitectureLayer model: Procurement System - Protocol - Shop - ERPProcurement System (Customer)SAP Ariba · MS Dynamics · Jaggaer · Coupa · Custom ERPPunchOutSetupRequestHook-URL / OCI paramsOCI 5.0 Protocol LayerForm-Post · Hook-URL · JS-CallbackcXML Protocol LayerPunchOutOrderMessage · AS2 · HTTPSShopware Shop + Punchout PluginSession ManagementPunchout CartSerializerField MappingERP Connector + Pricing LogicCustomer prices · Tiers · Framework agreements · Product masterERP SystemOrder creation · Inventory dataMonitoringSessions · Error alerts · DashboardActive data pathProtocol handoffConnection point
Layered architecture of the punchout integration: from the procurement system through the protocol and session layer to the ERP connector.

What Is Punchout and How Does OCI Work?

The term punchout describes the process by which a buyer "punches out" of their own procurement system directly into an external supplier's shop. There they browse the catalogue, add items to their cart and return to their system — the populated cart is automatically handed back as a structured data record. The procurement system can then immediately convert the transferred line items into a purchase requisition (PR) or a purchase order (PO).

OCI (Open Catalog Interface) is the most widely used punchout standard in Germany and the DACH region, originally developed by SAP. cXML (Commerce Extensible Markup Language) is the corresponding international standard, used primarily in the US and on platforms such as Ariba, Coupa and Jaggaer. Both standards define how the start parameters (URL, credentials, session token) are passed from the procurement system to the shop and in what format the cart is returned. We support both protocols fully and choose the appropriate one based on your customer's requirements.

OCI 5.0 (DACH Standard)

Open Catalog Interface version 5.0: the most widely used punchout standard in German and European B2B commerce. Used with SAP MM/SRM, Microsoft Dynamics and numerous custom ERP systems. The shop receives a login URL with OCI parameters and responds with a JavaScript post-back.

cXML PunchOutSetupRequest

The international standard for punchout, used by Ariba, Coupa, Jaggaer, Ivalua and SAP Business Network. The session is initiated via an encrypted PunchOutSetupRequest; the cart return is sent as a cXML PunchOutOrderMessage. Compatible with HTTPS tunnel and AS2.

Catalogue Direct Import (BMEcat)

For customers who prefer a static supplier catalogue over a live punchout: we export your Shopware catalogue as a BMEcat 2005 file that is imported directly into the procurement system. Prices, item numbers and classifications are updated periodically.

Secure Session Management

Every punchout session is authenticated using cryptographically secured, time-limited tokens. No persistent credentials in the browser; each session start generates a one-time token. Compatible with IP whitelisting and VPN requirements of your key accounts.

Customer-Specific Prices in Punchout

The punchout catalogue displays not list prices but the individually negotiated conditions for that customer from your ERP. Volume pricing, framework agreement rates and time-limited special conditions are shown automatically so the procurement system receives correct values.

Cart Return With Required Fields

The procurement system expects specific mandatory fields in the returned cart: item number, supplier code, UNSPSC or ECLASS commodity category, price, currency and unit of measure. We configure the return structure to exactly match the requirements of each customer portal.

The Punchout Process in Detail

On paper, punchout sounds straightforward. In practice, a reliable implementation requires the precise interplay of a Shopware plugin, session management, pricing logic and cart serialization. The following overview covers all six stages of a typical OCI punchout transaction and what happens technically at each step.

Why Punchout Is Not a Nice-to-Have

Large enterprises and corporations explicitly require punchout capability in their supplier onboarding requirements. Suppliers who cannot be connected lose the business to punchout-capable competitors. In industries such as automotive, chemicals and pharmaceuticals, an OCI or cXML integration is effectively a prerequisite for being listed as a preferred supplier. Our consulting team analyzes together with you which procurement platforms your most important customers use.

Scope of Our Punchout Implementation

A punchout integration consists of several technical layers that must be tightly coordinated. We take responsibility for the complete implementation — from Shopware plugin development and protocol configuration to the acceptance test with your customer's actual procurement system. The following is the complete service scope.

  • Shopware punchout plugin: OCI endpoint, session handling, punchout cart mode, hook URL management
  • cXML implementation: PunchOutSetupRequest/-Response, PunchOutOrderMessage, OrderRequest processing
  • Customer-specific pricing logic: conditions from ERP in real time or as cache, volume pricing, framework agreements
  • Field mapping: UNSPSC/ECLASS classification, supplier item number, customer item number (cross-reference)
  • Security: session token signing, HTTPS enforcement, optional IP whitelisting, token rotation
  • Acceptance test: end-to-end test with your customer's procurement system (sandbox or live)
  • Documentation: technical manual for your IT team and your customer's procurement team
  • Monitoring: runtime monitoring of all punchout sessions with error alerting after go-live
  • BMEcat export: periodic catalogue export for customers who prefer static catalogue import
  • Maintenance and updates: compatibility maintenance for Shopware major updates

Distinction: Punchout vs. EDI vs. B2B Portal

Punchout, EDI and a classic B2B customer portal are three different ways to digitize ordering processes with business customers. Which channel is right for which customer depends on the customer's system landscape, order volume and contractual agreements. In practice, all three channels are often active simultaneously — different customers use different access routes.

Punchout / OCI / cXML

Best suited for: large accounts with a central procurement system. The buyer keeps their familiar interface while gaining access to your current catalogue and individual pricing. Approvals run in the customer's system. Order volume typically high, order frequency moderate. Prerequisite: customer portal supports OCI or cXML.

EDI (EDIFACT / cXML Orders)

Best suited for: customers with very high, regular order volumes and stable product ranges. Fully automated exchange of structured order data without user interaction. No catalogue navigation — the customer already knows what they want to order. Ideal as a complement to punchout for repeat orders on framework agreements.

B2B Customer Portal

Best suited for: customers without a central procurement system or smaller buyers. The buyer logs directly into your portal, uses all self-service features and places orders independently. Approval workflows can be implemented within the portal. Combining with punchout is recommended: large accounts use punchout, mid-market uses the portal.

Technical Requirements and Compatibility

A successful punchout implementation requires both your Shopware shop and your customer's procurement system to meet certain prerequisites. On the shop side, our punchout plugin handles the entire protocol processing. On the customer side, we need access to the configuration interface of the procurement system or cooperation with the customer's IT team. From project experience, coordinating with the customer's IT team typically takes three to six weeks when all parties are actively engaged.

Shopware CE (All Current Versions)

Our punchout plugin is designed as a standalone Shopware extension and is compatible with Shopware 6.5 and 6.6. It uses no proprietary Shopware commercial features and requires no rework for minor platform updates.

Compatible Procurement Platforms

SAP SRM, SAP Ariba, SAP Business Network, Microsoft Dynamics 365 SCM, Jaggaer, Ivalua, Proactis, Onventis, Basware and custom ERP systems with OCI or cXML support. For each platform there are specific configuration parameters that we know and apply correctly.

Security Requirements of Large Accounts

Many corporations impose security requirements on their supplier punchout systems: mandatory HTTPS, certificate-based authentication, IP whitelisting, penetration tests. We support all of these requirements and document the security measures taken for your procurement departments.

Integration Into Existing B2B Infrastructure

Punchout is rarely a standalone project. For the cart return to contain correct prices and up-to-date product master data, the punchout catalogue must be fed by the same data sources as your regular B2B portal. This means the punchout pricing logic and the portal pricing logic share the same ERP connector. Only then can you be certain that a buyer sees the same price in the punchout catalogue as in the direct customer portal.

At the same time, orders placed via punchout flow into the same order processing pipeline as all other sales channels. The ERP receives the order regardless of whether the buyer ordered via punchout, through the portal, by EDI or by phone. This cross-channel consistency is a central quality criterion of professional B2B integrations. As part of our interface development, we ensure that all order channels operate on the same data foundation.

Punchout as Part of the B2B Integration Architecture

Single Data Foundation Across All Channels

The punchout catalogue, B2B portal and EDI all draw on the same pricing and product data from the ERP. A price changed in the ERP today is correct across all channels tomorrow — without manual maintenance across multiple systems. The central transformation layer of the integration architecture maps ERP fields consistently for all output channels.

  • Pricing logic configured once, consistent everywhere
  • Product master from PIM or ERP identical across all channels
  • Order receipt flows into ERP regardless of channel

Project Approach: From Analysis to Acceptance Test

Multiple Customers, Multiple Protocols

If you have several large accounts using different procurement platforms, we implement parallel punchout endpoints: customer A uses OCI, customer B uses cXML, customer C prefers BMEcat catalogue import. Our plugin manages any number of customer configurations, each with individual credentials, hook URLs and field mappings.

Frequently Asked Questions About Punchout and OCI