Understanding Application Access: Beyond Authentication

Typically, when considering application access, the focus is placed on authentication – the process of verifying identity and controlling entry for users or devices. However, a crucial complementary aspect exists: authorization. This defines the actions a user can perform once granted access within an application.

Oso: Simplifying Authorization for Developers

Oso, a developing startup, has created an open-source library designed to streamline the implementation of authorization features within applications. This library aims to alleviate the complexities developers often encounter when building these systems.

Recent Funding and Growth

The company recently announced the completion of a $8.2 million Series A funding round, spearheaded by Sequoia, with additional participation from SV Angel, Company Ventures, Highland Capital, and various angel investors. This investment, combined with a previous $2.7 million seed round from 2019, brings the total funding raised to $10.9 million.

The Value Proposition: Normalizing Authorization

Graham Neray, co-founder and CEO of the company, explains that developers have increasingly benefited from third-party API tools like Stripe and Twilio, which handle non-core application functions. Oso aims to replicate this benefit specifically for authorization.

“Our library, complete with pre-built integrations, guides, and a dedicated policy language, can accelerate developers’ authorization timelines by as much as 4x,” Neray stated.

Authorization vs. Authentication: A Key Distinction

Neray emphasizes that authorization is often misunderstood. He notes that initial reactions frequently position Oso as a competitor to Okta, which is inaccurate. While both relate to access, they serve distinct purposes and require different toolsets.

Defining User Permissions

While authentication confirms who you are, authorization dictates what you can do – determining accessible buttons, pages, and data. Currently, many developers manage this manually, often linking to Active Directory or similar systems and constructing custom permissions matrices. Oso intends to remove this burden by providing tools to abstract away much of the inherent complexity.

Open Source and Community Focus

The tool itself is open source, and the startup is currently prioritizing the development of a strong user community to foster developer engagement. A commercial model is planned for the future, though its specific form is still under consideration.

Team Expansion and Diversity

Founded in 2018, the company currently employs nine individuals and anticipates tripling its workforce within the next 18 months. Neray and co-founder/CTO Sam Scott are committed to building a diverse, inclusive, and equitable company culture.

“I actively work to ensure our applicant pool reflects the diversity we desire in our team – it’s the only effective approach,” Neray explained.

The Business Case for Diversity

Neray further highlights that fostering a diverse workforce isn’t solely a moral imperative, but also a strategic business advantage. “We aim to avoid creating an echo chamber of individuals with similar backgrounds and perspectives,” he added.

Hybrid Work Model

The company plans to establish a physical office in New York while also supporting a remote work arrangement for its employees. “We envision a hybrid model, with a New York office and remote team members,” Neray confirmed.

Early Stage Event Announcement

Early Stage is a leading event providing practical guidance for startup entrepreneurs and investors. Attendees will gain insights from successful founders and venture capitalists on building businesses, securing funding, and managing investments.

The event covers all facets of company development, including fundraising, recruitment, sales, product-market fit, public relations, marketing, and brand building. Each session incorporates dedicated time for audience questions and discussion.

Use code “TCARTICLE” at checkout to receive a 20% discount on tickets here.