if you are using a kerberos snc library on your BW system then you could only use the kerberos SNC for the backend SSO BOBJ --> BW part.
for the front end SSO --> BOBJ (using AD or whatever) you could also use Trusted Authentication (included) to perform the SSO.
