We are using a proxy, should we enable Kerberos Delegation?

No. The Kerberos ticket should be passed by the proxy to the EasySSO-enabled application as is.