PunchOut catalog: what it is and how it works
A PunchOut catalog is the bridge between a supplier's online catalogue and a buyer's ERP. Instead of the supplier's products being uploaded into the ERP and going stale, the buyer 'punches out' to the supplier's live catalogue, shops it, and returns their cart as a requisition — with current prices and full item detail intact. This guide explains what a PunchOut catalog is, how the session flow works, how it differs from a hosted catalog, and what makes one work well.
10 min read · Last updated 11 July 2026 · By Lapasar Procurement Technology
In short
A PunchOut catalog is a supplier catalogue that a buyer accesses from inside their ERP or e-procurement system. Rather than loading products into the ERP, the buyer punches out to the supplier's live, hosted catalogue, shops it, and returns the selected cart as a requisition using standards such as cXML or OCI. This keeps pricing and availability live and lets buyers stay inside their own purchasing workflow and controls.
What is a PunchOut catalog?
A PunchOut catalog is a supplier's online catalogue that a buyer reaches from within their own ERP or e-procurement system. When the buyer clicks the catalogue, the ERP opens a live session to the supplier's site — the buyer 'punches out' — and shops the catalogue there. At checkout, instead of placing an order, the cart is returned to the ERP as a populated requisition.
The contrast is with a hosted catalog, where the supplier's product and price data is uploaded into the buyer's ERP and stored there. A hosted catalog is self-contained but goes out of date the moment prices or availability change; a PunchOut catalog is always current because it is the supplier's live site. That live pricing is the main reason PunchOut has become the standard for anything beyond a small, stable product list.
PunchOut relies on messaging standards, chiefly cXML (Commerce eXtensible Markup Language) and OCI (Open Catalog Interface). These define the setup request that opens the session and the order message that returns the cart, so buyers and suppliers on different systems can interoperate.
How a PunchOut session works
A PunchOut session is a defined round trip between the buyer's system and the supplier's catalogue. It feels seamless to the buyer, but a specific message exchange happens underneath.
- Setup request: the buyer clicks the catalogue and the ERP sends a setup message (e.g. cXML PunchOutSetupRequest) with credentials to authenticate.
- Session start: the supplier validates the request and returns a URL; the buyer's browser opens the live catalogue in a session.
- Shopping: the buyer browses and adds items at their contracted prices, exactly as on any online store.
- Cart return: at checkout the supplier sends the cart back (e.g. cXML PunchOutOrderMessage), which populates a requisition in the ERP.
- Requisition to PO: the requisition follows the ERP's approval and budget workflow, then becomes a purchase order sent to the supplier.
- Integration levels: Level 1 returns a basic cart; Level 2 adds richer, category-level PunchOut into specific product areas.
Why PunchOut catalogs matter
PunchOut solves the central tension of catalogue procurement: buyers want a rich, current catalogue, but organisations need buying to happen inside their own controls. A hosted catalog gives control but goes stale; buying on the supplier's public site is current but escapes governance. PunchOut gives both — a live catalogue accessed inside the ERP's approval, budget and audit framework.
For suppliers, being PunchOut-ready is often a condition of doing business with large enterprises and GLCs, which standardise procurement on ERPs and expect suppliers to fit that workflow. For buyers, PunchOut is what makes a broad external catalogue usable without sacrificing pricing accuracy, spend visibility or compliance.
Benefits
Always-current catalogue
Because buyers shop the supplier's live site, prices and availability are never out of date the way a static upload becomes.
Buying stays inside the ERP
The returned requisition follows the ERP's approval, budget and audit controls, so governance is preserved.
No manual catalogue upkeep
Buyers avoid the burden of loading and maintaining supplier catalogue files inside their own system.
Rich shopping experience
Buyers get the supplier's full search, images and product detail, not a stripped-down hosted extract.
Interoperable via standards
cXML and OCI let buyers and suppliers on different systems connect without bespoke, one-off integrations.
Common challenges
Initial set-up effort
Configuring endpoints, credentials and field mappings, then testing the round trip, is a defined project on each side.
System-specific behaviour
Each ERP handles PunchOut, fields and integration levels slightly differently, so testing on the actual platform matters.
Requires a capable supplier
The supplier must host and maintain a live, PunchOut-ready catalogue with accurate data and reliable uptime.
Level of integration
Deciding between basic (Level 1) and richer category-level (Level 2) PunchOut affects the buyer experience and effort.
PunchOut catalogs in practice
In a working example, a buyer in their ERP selects a connected supplier's PunchOut catalogue. The ERP sends a setup request; the supplier authenticates it and returns a session URL; the buyer shops the live catalogue and checks out; the cart returns as a requisition carrying the exact items and contracted prices. From there the requisition is approved and issued as a purchase order — all without the buyer leaving their system or anyone re-keying a line.
For a Malaysian supplier, offering a PunchOut catalog is what makes its products buyable by enterprises standardised on SAP, Oracle, NetSuite and similar systems. The commercial route to a connection is on the PunchOut and ERP integration solution page; the platform-specific detail is in the SAP and Oracle pillars; and the full technical treatment of cXML, OCI and integration levels is in the PunchOut integration guide linked below.
Best practices
Serve a live catalogue
Keep the catalogue hosted and live so prices and availability are always current — the core advantage of PunchOut.
Support standard protocols
Implement cXML and OCI so you can connect to the widest range of buyer ERPs without bespoke work.
Keep catalogue data clean
Accurate products, units, prices and tax are what make the returned requisition usable in the ERP.
Test each buyer connection
Validate the full round trip on the buyer's specific ERP and version before going live.
Offer the right integration level
Match Level 1 or Level 2 PunchOut to what the buyer needs, balancing richness against effort.
Maintain uptime and support
Because buyers depend on the live catalogue, reliability and responsive support are part of the offering.
Summary
A PunchOut catalog lets a buyer shop a supplier's live, hosted catalogue from inside their ERP and return the cart as a requisition, using standards such as cXML and OCI. Unlike a hosted catalog that goes stale, PunchOut keeps pricing and availability current while keeping buying inside the ERP's controls.
This resolves the tension between a rich catalogue and organisational governance, which is why it is the standard for supplier catalogues and often a condition of enterprise business. The keys are a live catalogue, standard protocols, clean data and per-buyer testing. The commercial and technical detail lives in the ERP, SAP and Oracle pillars and the PunchOut integration guide linked below.
Key takeaways
- PunchOut lets buyers shop a supplier's live catalogue from inside their ERP.
- It keeps pricing current, unlike a static hosted catalog.
- The session uses standards such as cXML and OCI to interoperate.
- Buying stays within the ERP's approval, budget and audit controls.
- Being PunchOut-ready is often a condition of enterprise business.
Frequently asked questions
- What is a PunchOut catalog?
- A PunchOut catalog is a supplier catalogue a buyer accesses from inside their ERP. Instead of loading products into the ERP, the buyer punches out to the supplier's live, hosted catalogue, shops it, and returns the cart as a requisition using standards such as cXML or OCI — so pricing stays live and buying stays inside the ERP's controls.
- What is the difference between a PunchOut catalog and a hosted catalog?
- A hosted catalog stores the supplier's product and price data inside the buyer's ERP, which is self-contained but goes out of date when prices change. A PunchOut catalog is the supplier's live site accessed from the ERP, so it is always current. PunchOut is preferred for larger or frequently changing catalogues; hosted can suit small, stable lists.
- What are cXML and OCI in PunchOut?
- cXML (Commerce eXtensible Markup Language) and OCI (Open Catalog Interface) are the messaging standards that make PunchOut work. They define the setup request that opens the session and the order message that returns the cart, so buyers and suppliers on different systems can interoperate. cXML is widely used across ERPs; OCI originated with SAP and is also supported elsewhere.
- What are PunchOut integration levels?
- Integration levels describe how deep the PunchOut goes. Level 1 returns a basic cart from a single catalogue entry point. Level 2 supports richer, category-level PunchOut so buyers can enter specific product areas directly. The right level depends on the buyer's needs and how much configuration each side wants to do.
- How does a supplier offer a PunchOut catalog?
- The supplier hosts a live, PunchOut-ready catalogue that supports standard protocols (cXML/OCI), then configures a connection with each buyer's ERP — endpoints, credentials and field mappings — and tests the full round trip. See the PunchOut and ERP integration solution page for how Lapasar connects, and the PunchOut integration guide for the technical detail.
Take it further with Lapasar
Put it into practice
Compare the options
Go deeper
Explore related across the knowledge graph
Put these ideas to work
Talk to our team about consolidating spend, wholesale pricing, credit terms and delivery across Peninsular Malaysia — or request a walkthrough of the marketplace.
Prefer to talk to a real person?
Our team replies fast on WhatsApp and email — no forms, no waiting.

