Found this recent post:
In it, @tom says:
We have some APIs in development that will help with this.
In the meantime, you will need to modify the email template to point to your application, handle the activation token and issue a 302 redirect by hand.
The API call is below:
Authentication | Okta Developer
I’ll take a look and report back.
–Ray