Yes the internal database can be used for domain authentication, but you'd need to enter the usernames with the domain, eg DOM1/Fred
You can do circular proxy with domain stripping... but you wouldnt want to go there.
..or you use the ACS external authentication database feature to re-direct authentications to AD.