Update prerequisites.

Update recommended by @jonburchel

Author: MikeRayMSFT

docs/master-data-services/install-windows/secure-a-master-data-manager-web-application.md

@@ -26,7 +26,11 @@ ms.author: lle
 -   You must be an administrator on the web server where [!INCLUDE[ssMDSmdm](../../includes/ssmdsmdm-md.md)] is installed.  
 
 -   MDS must be installed on the web server, and a web application must exist. For more information, see [Install Master Data Services](../../master-data-services/install-windows/install-master-data-services.md) and [Create a Master Data Manager Web Application (Master Data Services)](../../master-data-services/install-windows/create-a-master-data-manager-web-application-master-data-services.md).  
-  
+
+- [IIS Extended Protection for Windows authentication](/iis/configuration/system.webserver/security/authentication/windowsauthentication/extendedprotection/) should not be enabled. 
+
+- Configure the web server to listen on all available IP addresses. Do not configure the Web server to listen on a specific IP address. 
+
 ### To secure the Master Data Manager web application with HTTPS  
 
 1.  After you have confirmed that the [!INCLUDE[ssMDSmdm](../../includes/ssmdsmdm-md.md)] web application is configured correctly with HTTP, create a certificate in IIS. For more information, see [Configuring Server Certificates in IIS 7](https://technet.microsoft.com/library/cc732230\(WS.10\).aspx).