Tim,
I agree with others, this is a great step.
We use WooCommerce on Wordpress, which we started with when we were 1/4 our current size. You might be surprised how many small companies go this route, although we’re probably at the very small end of your customer base.
I’ve been playing with API integrations in Excel VBA (to help people stop reading the DB directly) and I discovered that calling APIs from WordPress is pretty simple to do, but not super easy to secure.
But “not super easy” pales in comparison to the tangled web that is Service Connect. I realize SC has API functionality now. I don’t know if it did when my predecessor built the integration, but we ended up with WordPress exporting a CSV; Task Scheduler running CLI FTP to go get it; Service connect workflows picking it up and turning it into an order; and a bunch of UD table nonsense making it think it’s being entered by someone legit. It works when it works, but upgrading is a nightmare, with hundreds of those little spidery things you have to drag and drop from one side of something to another…
Why not give your dev team an easy one to practice on, and build a WordPress plugin that can show a cute little form called by a shortcode, and call your SalesOrder APIs after doing all the right token things? It would be easily secured with API keys and access scope - you could even force that - and wouldn’t require anything at all in Epicor.
Great initiative either way though.