Point the OPC UA connection at opc.tcp://localhost:49320, it'll attempt to connect on both primary and backup. You'll have to go accept Kepware's server cert on the backup, and accept Ignition's certificate in both Kepware instances.
Don't use any of the settings in the "Failover" section of the OPC UA connection.