It was calculated to around half a million counting all cities. The "1 million people in Sao Paulo" was an estimate that was soon proved false.
Official numbers (calculated by the police) say more than 2 million country-wide. I don't see anyone claiming "1 million people in São Paulo" to be false, except government-sponsored media.