What about creating the user with a password (AND a recovery question if you want) and immediately activating them?
That way you don’t have to try to follow the activation link and fill out the welcome page and instead handle all of that set-up via API.