By following the above steps, we ended up with credentials persisted locally in the .lfsconfig file.
Therefore you should proceed with caution and not push the .lfsconfig to your Git repository. Doing so exposes your Artifactory credentials to anyone who can view the project.
When the Git project is integrated with Git LFS and a new user clones the project, he will initially fail to get the LFS-tracked files. This is because he is missing the .lfsconfig file.
When not pushing the .lfsconfig to git, you should instruct users to configure this on their own with their own Artifactory account credentials.
Alternatively, you can configure the .lfsconfig without credentials and make it part of the Git repository.
Then, upon pushing or pulling, users will be prompted for credentials.