Hello Carsten,
there is the possiblity to configure X.509 and Kerberos authentication in parallel on the server side.
It would be ok that one client will be the SNC client Encryption SAP GUI instead of a full SSO Secure Login Client. It makes no difference for SNC on server side.
This scenario will work.
best regards
Alex