The default is to send an email which will contain a link that includes the activation token so the user can set their password from the Okta hosted login page.
If sendEmail=false, the call will return a response with the activation URL and the activationToken. If you prefer you can use the activationToken to bootstrap a self hosted widget and go through the setting the password for the user from your own application via the widget.