Can we SSO with Google or will I need to setup and maintain a list of users?

You can use Google right out of the box for auth. The only list of users you’ll need to maintain is the users who have access to a workspace (or a set of Airflow instances).