Generates a unique UUID state token required to initiate OAuth 2.0 SSO authentication. The token is associated with the specified OAuth provider configuration and is used to validate the OAuth callback. Token expires after 30 minutes or once used in the /authentication/oauth/redirect endpoint. No authentication required.