# Mila Account Setup

> >-

- **Type:** Skill
- **Install:** `agentstack add skill-mila-iqia-skills-mila-account-setup`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [mila-iqia](https://agentstack.voostack.com/s/mila-iqia)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [mila-iqia](https://github.com/mila-iqia)
- **Source:** https://github.com/mila-iqia/skills/tree/master/mila-tools/skills/mila-account-setup

## Install

```sh
agentstack add skill-mila-iqia-skills-mila-account-setup
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Mila Account, Cluster Access, and MFA Setup

This skill helps cluster users obtain their Mila account, enable cluster
access, and configure Multi-Factor Authentication (MFA) — the three
prerequisites before connecting via SSH for the first time.

## Base policies

At the start of each response, use the Skill tool with `skill: "mila-base"` to
load and apply all shared policies before proceeding with the workflow below.

## Reference documentation

Primary source: **https://docs.mila.quebec/getting_started/**
— sections "Before you begin" and "Set up Multi-Factor Authentication (MFA)".

For detailed MFA management (adding/removing tokens, recovery):
**https://docs.mila.quebec/Userguide_login_mfa/**

## Discover documentation

Use the WebSearch tool with this query to find the current URL of the primary
source above:

    site:docs.mila.quebec "__skill-mila-account-setup"

Use the URL from the search result in the WebFetch steps below. If the search
returns no results, fall back to the hardcoded URL in "Reference documentation".

## Workflow

### Step 1: Identify the sub-topic

Determine which of the three areas the user is asking about:

- **Account** — getting an `@mila.quebec` account
- **Cluster access** — enabling SSH access after getting the account
- **MFA** — setting up the authenticator for SSH login

If the question is ambiguous, ask one clarifying question before fetching
content.

### Step 2: Fetch the documentation

Use the WebFetch tool to fetch **https://docs.mila.quebec/getting_started/** and locate the
relevant section:

- Account → "Obtain your Mila account" (under "Before you begin")
- Cluster access → "Enable your cluster access" (under "Before you begin")
- MFA → "Set up Multi-Factor Authentication (MFA)"

If the user needs MFA recovery or wants to add/remove tokens after initial
setup, also use the WebFetch tool to fetch **https://docs.mila.quebec/Userguide_login_mfa/**.

### Step 3: Guide the user

Walk through the steps for the identified sub-topic. Key points to cover:

**Obtaining a Mila account:**
- Ask the supervisor to submit an application to IT.
- IT sends a confirmation email with instructions to access the account and
  connect to the cluster.
- If the wait is longer than expected, contact MyMila support.

**Enabling cluster access:**
- Complete the IT Onboarding Guide and submit the quiz.
- After passing, IT sends the cluster username (by email or Slack).
- Cluster access can take up to 48 hours to become active.
- An email will arrive with a one-time registration token for MFA setup.

**Setting up MFA:**
- The registration token arrives by email with subject
  "Votre accès temporaire registrationcode / Your temporary access
  registrationcode".
- Go to https://mfa.mila.quebec, enter the cluster username and the
  registration token as the password.
- Immediately add at least one TOTP token: install a TOTP-compatible
  authenticator app (privacyIDEA Authenticator, Authy, Google Authenticator, or
  any RFC 6238-compliant app) and scan the QR code.
- The MFA reference recommends enrolling **at least two factors** for
  redundancy (e.g., two TOTP apps on different devices).
- Warn the user: the portal only accepts the registration token on the
  first login. Leaving without adding a TOTP token means you cannot
  log in to the portal again; contact IT support at
  https://it-support.mila.quebec to get a new registration token.

### Step 4: Answer follow-up questions

Respond to follow-up questions about the same area. Common ones:

- "Which authenticator app should I use?" — any RFC 6238-compliant TOTP app
  works; privacyIDEA Authenticator, Authy, and Google Authenticator are all good
  choices. Enroll at least two for redundancy.
- "I didn't set up TOTP before leaving the portal" — contact IT support at
  https://it-support.mila.quebec to get a new registration token.
- "How do I add more MFA methods?" — refer to
  https://docs.mila.quebec/Userguide_login_mfa/

### Step 5: Point to the next skill

Once account, access, and MFA are in place, direct the user to the
**mila-local-setup** skill to install the tools needed to connect.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [mila-iqia](https://github.com/mila-iqia)
- **Source:** [mila-iqia/skills](https://github.com/mila-iqia/skills)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-mila-iqia-skills-mila-account-setup
- Seller: https://agentstack.voostack.com/s/mila-iqia
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.