Sync Multiple Domains in Duo using the Forest Root Domain

I've had many Duo customers ask whether it is possible to just use the root domain of an Active Directory forest to synchronise all users including those that are in child domains in the same forest. This is indeed possible…