Michael,
Your summary is correct apart from the last part when you mention licensing. As I mentioned, the only part which is free is SPNEGO JAVA. For SPNEGO on ABAP and SNC for SAP GUI SSO with Kerberos, you need a license for an SSO product, either the SAP product or a SAP SSO product from an SAP partner.
Thanks
TIm