Good call. I looked it up and the population of Sao Paolo's "city proper" is slightly higher; probably the question should be removed, or the wording changed.
Point of politeness: the major Italian subdivisions are called Regions and not states (as would be the case, for example, in Australia, Mexico, or India).