The integration broker should NOT be exposed to the internet. The integration broker is a critical piece of infrastructure and should be protected behind a firewall. It should only be accessible from within the internal network or very trusted partners via IP whitelist. If you need to expose web services to the internet, you should use a separate API gateway or reverse proxy that can handle the security and scalability requirements of internet-facing APIs. PeopleTools is not updated as frequently as modern API gateways and does not have the same level of security features. It is better to use a dedicated API gateway for internet-facing APIs and keep the integration broker protected behind a firewall.
Starting in 2026 with powerful and cheap LLM code generation tools, it will be possible to generate code that can exploit vulnerabilities in PeopleSoft web services. This means that exposing PeopleSoft web services to the internet will become increasingly risky over time.
Chris Malek is a PeopleTools® Technical Consultant with over two decades of experience. He is available for consulting engagements.
Work with ChrisSWS turns SQL into production REST APIs — ready for AI, modern apps, and partner integrations. One install, unlimited potential.
A powerful PeopleSoft bolt-on that makes REST web services easy. You bring the SQL, SWS handles the rest.
Traditional PeopleSoft web services cost $3,600–$13,000 each to develop. SWS deploys production REST APIs in under 5 minutes through configuration alone.
Turn PeopleSoft data into clean REST APIs for AI integrations, modern applications, and vendor data feeds. Configuration-driven — no PeopleCode required.
Look up any record, field, page, or component, audit security, and monitor Integration Broker across every database — in seconds.
A web console built for the PeopleSoft community — operational monitoring, security auditing, and metadata browsing in one tool.
On-demand security and operational reports for your PeopleSoft environment — no client install required.
Research any PeopleSoft object and monitor system health from a single browser tab — no App Designer, no SQL.